CVE-2020-0192

CVE-2020-0192 is an out-of-bounds read vulnerability in the ih264d_decode_slice_thread function within Android 10, specifically affecting the H.264 video decoder. This flaw allows for remote information disclosure without requiring elevated privileges, though user interaction is necessary for successful exploitation. Rated as Medium severity (CVSS 6.5), the attack vector is network-based with low complexity, potentially leading to high confidentiality impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.